Latin America LATAM

The defining D1 development this cycle is a structural bifurcation in how the United States, European Union and United Kingdom treat Venezuela. Executive Order 14373 (9 January 2026) created a Foreign Government Deposit Funds mechanism, triggering a cascade of General Licenses, the GL46-52 series plus GL30B, GL48B and GL49A, that reopened Venezuelan oil, gas, mineral and petrochemical trade through licensed and authorized channels. Read through the sanctions-architecture filter, this is not an isolated licence grant but a redesign of the channel through which Venezuelan state oil revenue reaches global markets, moving from blanket restriction toward a licensed-conduit model. At the identical moment, the European Commission added Venezuela to its high-risk third-country list under Delegated Regulation (EU) 2025/1184, and HM Treasury June 2026 Advisory Notice under Money Laundering Regulation 33 lists Venezuela, Bolivia and Haiti as High-Risk Third Countries requiring enhanced due diligence, a broader scope than the EU list. The strategic-consequence layer of this divergence is what matters most for D1: banks, payment companies and cross-sector obliged entities operating across all three regimes must reconcile a licensing regime that is opening with due-diligence regimes that are simultaneously tightening, on the same underlying jurisdiction.

This sanctions-regime divergence is compounded by a procedural shift inside the UK architecture itself. From 28 January 2026 the Office of Financial Sanctions Implementation retired the separate OFSI Consolidated List in favor of a single UK Sanctions List, a further divergence point from EU and US list structures that firms must map separately when reconciling screening architecture across jurisdictions.

Against this backdrop, the grey-list picture reinforces a story of unresolved capacity deficit rather than acute new risk. Bolivia, added to the FATF grey list in June 2025, and Venezuela, listed since June 2024, remain under increased monitoring as of the 19 June 2026 Plenary, with deficiencies spanning special investigative techniques, DNFBP risk-based supervision, beneficial-ownership breach sanctioning and money-laundering prosecutions. Haiti, grey-listed since June 2021, carries expired action-plan deadlines, the clearest capacity-deficit signal in the bloc. Venezuela carries an additional, distinct D1/CTF finding: FATF 2024 assessment of its non-profit-organisation legal framework finds oversight potentially disrupting legitimate non-profit activity while failing to target genuine terrorism-financing risk, a dual failure mode that both misses the Recommendation 8 objective and creates a tool that could be turned against civil society, a finding the F1 state-capture filter treats as significant precisely because Venezuela institutions have already demonstrated a pattern of blurred state and criminal-network lines elsewhere in this cycle.

The enforcement layer illustrates the enabling-architecture principle directly. OFAC December 2025 designation of individuals and a Bogota-based entertainment company as SDGT/TCO actors for Tren de Aragua money-laundering operations is significant less for the designation than for the front-company layer it exposes: an ordinary-looking commercial entity used to move and layer criminal proceeds across a border. That is the architecture worth tracking, since designations against individuals rarely disrupt a front-company model that can simply be replaced.

Taken together, the D1 picture this cycle is one of architecture moving in two directions simultaneously: a licensed-channel liberalisation on the US side and a restriction-and-monitoring hardening on the EU, UK and FATF side, with the region own weakest-capacity states, Bolivia and Haiti, providing the backdrop against which both movements play out.

Outlook

The next structural checkpoint is the FATF October 2026 Plenary, which will conduct the scheduled action-plan progress review for Bolivia, Haiti and Venezuela and determine continued grey-listing, on-site assessment eligibility, or potential delisting. The EU high-risk-third-country list carries its own review clause anticipating a further Commission reassessment of Venezuela status following that FATF outcome, meaning EU obliged entities should expect a possible list amendment in the following quarter. For firms navigating the US/EU/UK Venezuela divergence in the interim, the practical exposure is less about any single new designation and more about maintaining parallel screening logics against a jurisdiction that is simultaneously opening on one sanctions axis and tightening on two others, an unusual and analytically significant configuration that this cycle establishes as the LATAM D1 baseline going forward.

LATAM sits outside the direct supervisory and regulatory perimeter of the EU AML Package, and the region own D2 signal this cycle is best read on its own regulatory footing before any reference to that European backdrop. The directly relevant development for this bloc is the persistent absence of effective beneficial-ownership enforcement in Bolivia and Haiti: neither jurisdiction ensures timely, accurate, up-to-date beneficial-ownership information accessibility, nor operates an effective sanctioning regime for beneficial-ownership breaches, per FATF own action-plan language tied to Recommendations 24 and 25. That absence is not a technical gap; it is the mechanism by which layered shell structures persist undetected across the region legal-person transparency baseline, and it sits alongside the same two jurisdictions ongoing FATF grey-listing. Panama, by contrast, offers the regional counter-example: its delisting from the EU high-risk third-country list, via Delegated Regulation (EU) 2025/1184 in June 2025, evidences that reform-driven improvement in corporate-transparency standing is achievable inside the bloc. That said, OCCRP reporting flags the delisting as potentially outpacing the underlying reform substance, a gap between a Tier-1 delisting decision and Tier-2 investigative scepticism that is itself an analytically relevant signal under FIM source-hierarchy methodology, and one that argues for continued monitoring of Panama corporate-registry practice rather than treating the delisting as a closed matter.

Globally, the EU AML Package sets the structural direction against which beneficial-ownership regimes worldwide are increasingly measured, and it forms the durable backdrop for reading this cycle bloc-level signal even though LATAM states sit outside its direct scope. The Package now comprises three distinct instruments: the AML Regulation, or AMLR (Regulation (EU) 2024/1624), which is directly applicable across EU member states without national transposition; the sixth AML Directive, or 6AMLD, which each member state transposes into domestic law individually; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and creates a hybrid EU-level supervisory perimeter with direct and indirect supervision of certain cross-border obliged entities, shifting authority away from purely national supervisors. As a non-EU, non-EEA bloc, LATAM states are not subject to AMLR direct applicability, 6AMLD transposition obligations, or AMLA direct/indirect supervision; the operative linkage for this region instead runs through the EU Article 9 high-risk third-country list, where Venezuela addition and Panama delisting, in the same June 2025 instrument, are the concrete points of contact between LATAM corporate-transparency practice and the European architecture.

The practical takeaway for obliged entities dealing with LATAM counterparties is that beneficial-ownership risk in this bloc is unevenly distributed and structurally, not episodically, determined: Bolivia and Haiti carry unresolved deficiencies with no near-term resolution signalled, while Panama demonstrates that reform is possible but not yet fully verified at the level of underlying registry practice.

Outlook

The most consequential near-term event for LATAM beneficial-ownership standing is the FATF October 2026 Plenary review of Bolivia and Haiti progress, which will determine whether either jurisdiction narrows its beneficial-ownership enforcement gap sufficiently to advance toward delisting. On the European side, the EU high-risk-third-country list review clause anticipates a further Commission reassessment of Venezuela status following that FATF outcome, a development obliged entities transacting with Venezuelan corporate structures should track as an input to risk-rating rather than as a firm-specific instruction. Panama post-delisting registry practice remains an open verification question that this brief flags for continued monitoring rather than resolution this cycle.

The defining D3 finding this cycle is a permit-arbitrage architecture that has proven resilient to repeated enforcement. CJNG and Sinaloa Cartel proceeds move through complicit Pemex insiders, mislabelled crude and refined fuel shipments, and Mexican brokers holding CNE rather than SENER import permits, into ordinary-looking cross-border energy trade with complicit US energy traders, at a scale FinCEN own alert describes as costing billions of dollars. Enforcement filter analysis identifies the permit-arbitrage layer itself, the exploitation of the gap between CNE and SENER licensing regimes, as the enabling architecture; the individual OFAC designations issued in May 2025 and June 2026 are downstream data points against that architecture, not disruptions of it. That repeat enforcement without structural disruption is itself the signal: it indicates the underlying broker infrastructure, not any single set of designated individuals, remains the true node requiring attention, and that node has proven durable across at least two separate designation waves.

A second, structurally distinct D3 finding concerns Hizballah commercial and black-market financial infrastructure spanning Argentina, Brazil, Paraguay and Panama free-trade zones. This network continues generating revenue through oil smuggling, black-market money exchange and counterfeiting, historically implicating the Clan Barakat network frozen by Argentina financial intelligence unit, per FinCEN Alert 508C. The Panama free-trade-zone dimension of this network places Panama, alongside Mexico, among this cycle enabler-jurisdiction findings, reinforcing that permissive trade-zone architecture, not merely weak sanctions enforcement, is a recurring enabling condition across the bloc.

Argentina itself surfaces a distinct enforcement-gap finding: its 2024 Mutual Evaluation found terrorism-financing investigations mostly reactive and dependent on suspicious transaction reports, with no terrorism-financing convictions despite substantial Tri-Border-Area and Hizballah-linked exposure. Applying the enablement-as-signal principle, the absence of prosecutions following the Clan Barakat freeze is itself analytically significant: freezing action without conviction limits deterrent effect and signals a persistent institutional capacity gap rather than a lack of underlying activity to prosecute.

Read together, these three findings, the Mexican broker-permit architecture, the Hizballah Tri-Border-Area network, and the Argentina prosecution gap, describe a consistent D3 pattern across the bloc this cycle: enabling infrastructure that survives individual enforcement actions because the underlying professional-facilitator or permit-arbitrage mechanism is never itself dismantled. This is the architecture-over-incident principle applied at bloc scale, and it argues for continued monitoring of broker-level and free-trade-zone-level structures rather than treating any single designation wave as resolution.

Outlook

No scheduled regulatory event directly targets the Mexican permit-arbitrage architecture or the Hizballah Tri-Border-Area network in the near term; both remain open enforcement gaps absent a structural intervention such as a CNE/SENER permit-reconciliation reform or a coordinated Argentina-Paraguay-Brazil prosecutorial initiative. Argentina TF-prosecution gap will be a useful marker to revisit against any updated FIU or court case-level data that emerges, since the 2024 Mutual Evaluation remains, for now, the only substantiated evidentiary basis for the finding. Firms with exposure to Mexican energy trade counterparties or Tri-Border-Area commercial activity should treat the persistence of these architectures, rather than any individual designation, as the operative risk signal going into the next cycle.

The most severe D4 finding this cycle is the July 2025 Treasury designation of Cartel de los Soles as a criminal group linked to senior Venezuelan state and military figures, providing logistical and financial support that connects Tren de Aragua to the Sinaloa Cartel. Applying the state-capture filter directly, this designation describes a node at which the distinction between state authority and private criminal enterprise has functionally collapsed: state-military figures are described as providing support to organisations, including Tren de Aragua and the Sinaloa Cartel, that would ordinarily be treated as external threats to state authority rather than beneficiaries of it. This is the clearest instance this cycle of a state institution appearing to protect, or actively participate in, illicit financial flows rather than merely fail to prevent them, and it is precisely the kind of finding the F1 filter is designed to surface and route to WDM kleptocratic-network tracking.

The second major D4 finding is the Mexican cartel crude-oil and fuel-theft architecture, which continues at what FinCEN own alert language describes as billions-of-dollars scale, undisrupted by successive OFAC designation waves in May 2025 and June 2026. Read through the conflict-finance filter, this is not simply a financial-crime pattern but a direct revenue stream sustaining cartel violence and territorial control in Mexico, tracing from the point of theft, through complicit Pemex insiders and CNE-permit-holding brokers, to deployment as operating capital for continued cartel activity, including the violence FinCEN own alert explicitly links to the smuggling operations.

Together, these two findings describe conflict finance operating at two different levels of state proximity within the same reporting cycle: an alleged direct state-military nexus in Venezuela, and a state-adjacent but formally illicit extractive-sector theft architecture in Mexico. Both warrant escalation beyond FIM own domain boundaries; the Venezuela finding is flagged to WDM for its kleptocratic-network and state-capture dimension, while the Mexico finding is flagged to both ERM, for its commodity-flow characteristics, and SCEM, for its conflict-finance and violence-funding dimension.

Outlook

Neither the Cartel de los Soles designation nor the Pemex theft architecture has a scheduled regulatory checkpoint attached to it this cycle; both remain open, structurally embedded risks rather than time-bound compliance events. The practical implication for obliged entities is that PEP and fund-structure customer typologies connected to Venezuelan state-adjacent actors, and trade-finance and correspondent-banking exposure connected to Mexican energy-sector counterparties, both warrant continued enhanced scrutiny independent of any near-term regulatory trigger, since the underlying conflict-finance architectures in both cases are described by primary sources as active and ongoing rather than resolved.

The pivotal LATAM digital-asset development this cycle is centered on Brazil, and the region own regulatory build-out is the appropriate starting point before any reference to global frameworks such as MiCA. The Central Bank of Brazil new VASP authorization regime, known as SPSAV, brought reporting obligations into force from 4 May 2026, ahead of a full licensing deadline of 29 October 2026. That regime arrives against a backdrop where cartel proceeds, sanctioned-entity flows and Chinese-language money-laundering-network activity together account for more than half of identified illicit inflows to select Brazilian exchanges in 2025, concentrated on a small number of deposit addresses. This concentration is the analytically significant fact: it means the new regime does not need to detect diffuse, low-value illicit activity so much as a small number of already-identifiable high-value flows, making the October 2026 licensing deadline a genuine test case of regime effectiveness rather than an abstract compliance milestone.

That test case is sharpened by continuing enforcement activity. OFAC designated two Brazilian nationals and four companies for laundering over thirty million dollars in US-generated drug proceeds via cryptocurrency back to Brazil, its third action against the Primeiro Comando da Capital since 2021, evidencing that crypto-facilitated laundering by Brazil-linked organised-crime groups is a recurring rather than isolated pattern that predates and will likely outlast the new authorization regime absent structural detection improvements.

Beyond Brazil, Venezuela crypto ecosystem presents a structurally distinct but related D5 finding: a growing dependency on USDT-denominated retail and remittance activity, driven by bolivar depreciation and sanctions pressure. This digital-dollarisation trend has direct AML and sanctions-screening perimeter implications, since it channels retail-scale value transfer through stablecoin rails that sit partly outside traditional correspondent-banking screening architecture, and it should be read alongside, but as analytically distinct from, the D1 sanctions-liberalisation trend affecting Venezuela oil-sector transactions.

Globally, frameworks such as MiCA and the FATF virtual-asset standards set contextual direction for how digital-asset regulation is expected to mature, but for this bloc the immediately relevant regulatory action is domestic: Brazil own SPSAV regime and its associated asset-seizure powers, discussed further under D6, are the concrete mechanisms against which this cycle illicit-flow findings will be tested.

Outlook

The SPSAV full-authorization licensing deadline of 29 October 2026 is the single most consequential near-term D5 event for the bloc: it will determine whether Brazilian VASPs can demonstrably detect and report the cartel, sanctioned-entity and money-laundering-network flows already identified in 2025 exchange data, or whether the concentration persists into the newly-regulated period. In parallel, Brazil securities regulator CVM is expected to finalize rules from its consultation on when crypto assets constitute securities, a determination that will further shape the AML/CFT regulatory perimeter for Brazil crypto sector. Venezuela stablecoin-dependency trend has no scheduled regulatory checkpoint attached and should be tracked as a structural, ongoing condition rather than an event-bound risk.

Brazil supplies this cycle only concrete D6 build-out for the LATAM bloc, and it is best read as a paired regulatory-technology and enforcement-power development rather than two separate items. The Central Bank of Brazil VASP authorization regime, SPSAV, is the region first hard compliance-technology test case: reporting obligations came into force on 4 May 2026, with a full licensing deadline of 29 October 2026, requiring crypto-asset operators to transition from a reporting-only obligation to full authorization. Because cartel proceeds, sanctioned-entity flows and Chinese-language money-laundering-network activity already account for more than half of identified illicit inflows to select Brazilian exchanges in 2025, this regime is not being introduced into a clean environment; it is being tested directly against known, concentrated illicit-flow patterns, which makes the October 2026 deadline a genuine active-defence proving ground rather than a routine licensing milestone.

Complementing that authorization regime, Brazil enacted Law No. 15.358 in March 2026, granting authorities expanded powers to freeze, seize and repurpose crypto assets linked to organised crime. Read together with SPSAV, this represents the most concrete active-defence build-out identified anywhere in the bloc this cycle: a detection-and-reporting layer (SPSAV) paired with an asset-disruption layer (Law 15.358), targeted directly at the illicit-flow concentration already identified in exchange data rather than at crypto-asset activity generally. This pairing is the kind of structural, tool-level development the D6 domain is designed to surface, distinct from the underlying D5 illicit-flow finding it is built to address.

No other LATAM jurisdiction registers a comparable D6 development this cycle; the domain signal for the bloc is concentrated entirely in Brazil, reflecting Brazil position as the region largest and most active digital-asset market and therefore its most urgent active-defence priority.

Outlook

The SPSAV full-authorization licensing deadline of 29 October 2026 is the direct test of whether Brazil new detection-and-reporting architecture translates into measurable disruption of the illicit-flow concentration already identified in 2025 exchange data. Law 15.358 asset-seizure powers provide the complementary enforcement lever, but their practical effectiveness will only become assessable once seizure or repurposing actions under the new law are documented in a future cycle. This brief treats the Brazil build-out as improving in trajectory but explicitly untested in outcome, consistent with the interpreter own assessment that whether the new controls close the identified gap remains an open question.